DNS, email authentication (SPF, DKIM, DMARC), mail blocklist, WHOIS, TLS certificate and HTTP security header checks against live public resolvers, with the fix for each finding.